$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa File: ad6019c5-db98-3f76-bfae-976b40532f1f.roa (raw, json) Hash identifier: j/ipDgS1dPjZF+gHgZjVnByeb3Ugqp3iSMkIvs7G5Gs= Subject key identifier: 07:D9:9D:ED:49:E6:D2:33:2D:6D:D8:C9:C8:ED:2E:BD:AD:36:08:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FD4F0BABFF867A268780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fd:4f:0b:ab:ff:86:7a:26:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d42cb26b-9722-46c5-8dcc-0d819fd84b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:34:7c:30:a9:5b:b6:e2:ce:1a:b4:15:d2: f7:47:dd:3a:c8:21:08:af:62:d9:26:1a:07:e5:7d: 7d:f8:79:a3:98:44:f5:17:c4:fd:26:85:8b:92:b7: 85:8f:8a:b2:8c:a2:32:41:c9:11:ca:4a:ab:de:bd: d1:35:24:79:b5:14:8b:19:4b:f9:40:9c:52:5d:84: 69:0a:ce:e4:7b:23:7e:c2:72:11:5c:09:58:85:a8: dd:02:fd:7d:6c:60:c5:68:8e:31:4f:c7:9f:80:0f: 43:87:0d:97:c9:d2:01:6e:e7:1c:97:8f:fe:5b:82: f6:04:51:c5:ab:19:1d:1e:95:f3:af:fa:24:52:18: 97:fd:26:6d:6b:b4:5f:7f:40:51:a0:6c:a2:50:df: 2a:74:55:26:08:45:7d:e7:66:f7:99:f5:54:cc:40: bb:bf:94:d4:67:c1:35:20:f6:82:df:3d:c7:3a:ae: 23:98:ee:e3:76:e0:4a:29:6b:e2:57:27:e1:c9:d8: d6:0d:ae:b1:25:5c:f8:6f:a3:c6:b0:97:45:31:01: 2a:d3:61:85:d5:9d:37:22:16:05:cb:80:eb:65:c1: 68:5e:c5:9a:60:79:51:df:a9:68:72:74:4c:4d:9d: 7f:1d:5b:7c:00:5d:03:07:55:9d:de:5a:5e:34:20: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D9:9D:ED:49:E6:D2:33:2D:6D:D8:C9:C8:ED:2E:BD:AD:36:08:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:aa:c2:ac:73:bd:22:b4:71:d5:98:84:1f:3f:b1:9d:22:11: 95:23:69:43:bb:ca:c9:8f:5e:40:d9:1d:2e:e6:8a:d2:4e:d4: 4a:4c:71:76:7d:b0:68:b1:cb:eb:3d:9b:d0:7d:ee:46:d5:fa: 15:73:66:d1:e0:f4:e2:57:40:c1:8b:58:7b:de:06:a3:1e:56: 81:57:cc:a8:c8:c5:81:ec:52:cf:a9:bf:23:50:a4:d0:20:76: 5e:df:ce:15:85:f4:0c:e9:5c:d9:98:b6:34:58:03:56:54:93: bf:82:38:a8:65:28:03:91:55:78:f7:32:79:6e:c2:de:99:94: b5:ac:37:fd:99:59:e8:c6:e0:d1:39:18:50:50:c9:2c:64:29: ae:ed:cf:62:ab:31:be:5c:53:5d:79:36:e2:74:de:e5:d2:21: e8:54:a2:fd:c8:9a:0a:90:7c:d3:f1:ad:85:bf:97:9f:96:b9: 6b:4f:cd:a0:23:2e:6a:90:17:eb:0f:33:6b:24:8b:62:4f:33: bb:1f:d2:57:e2:96:85:54:8c:5c:a7:30:7e:6c:73:5c:9d:db: b7:82:20:99:c7:b0:d3:fe:6f:40:db:d5:7e:b0:ea:4a:2b:dc: e3:a9:20:05:07:66:ef:f2:c0:c0:a0:76:b8:96:2e:69:67:57: ee:85:df:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf1PC6v/hnomh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQyY2IyNmItOTcyMi00NmM1LThkY2MtMGQ4MTlmZDg0YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JY0fDCpW7bizhq0FdL3R906yCEIr2LZJhoH 5X19+HmjmET1F8T9JoWLkreFj4qyjKIyQckRykqr3r3RNSR5tRSLGUv5QJxSXYRp Cs7keyN+wnIRXAlYhajdAv19bGDFaI4xT8efgA9Dhw2XydIBbuccl4/+W4L2BFHF qxkdHpXzr/okUhiX/SZta7Rff0BRoGyiUN8qdFUmCEV952b3mfVUzEC7v5TUZ8E1 IPaC3z3HOq4jmO7jduBKKWviVyfhydjWDa6xJVz4b6PGsJdFMQEq02GF1Z03IhYF y4DrZcFoXsWaYHlR36locnRMTZ1/HVt8AF0DB1Wd3lpeNCBBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfZne1J5tIzLW3YycjtLr2tNghUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ2MDE5YzUtZGI5OC0z Zjc2LWJmYWUtOTc2YjQwNTMyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuqwqxzvSK0cdWYhB8/sZ0iEZUjaUO7ysmPXkDZHS7mitJO1EpMcXZ9 sGixy+s9m9B97kbV+hVzZtHg9OJXQMGLWHveBqMeVoFXzKjIxYHsUs+pvyNQpNAg dl7fzhWF9AzpXNmYtjRYA1ZUk7+COKhlKAORVXj3Mnluwt6ZlLWsN/2ZWejG4NE5 GFBQySxkKa7tz2KrMb5cU115NuJ03uXSIehUov3ImgqQfNPxrYW/l5+WuWtPzaAj LmqQF+sPM2ski2JPM7sf0lfiloVUjFynMH5sc1yd27eCIJnHsNP+b0Db1X6w6kor 3OOpIAUHZu/ywMCgdriWLmlnV+6F35c= -----END CERTIFICATE-----Generated at Sat Apr 26 20:48:19 2025 by rpki-client